$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa File: f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa (raw, json) Hash identifier: XC9Y0x4xPtjG544yvAzukvOsaic99WNngaQ+9hrxrMs= Subject key identifier: 5E:39:1A:93:8F:FA:A4:70:63:71:D3:01:6B:B9:D5:22:66:C8:BE:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E16BCEA284C6768A10231F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 396610 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:ce:a2:84:c6:76:8a:10:23:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=25718fcd-174b-41ce-b804-7136bfd605fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f6:99:e1:3c:1b:8e:6d:4e:3b:d3:41:eb:ee: 75:40:09:73:01:5d:b3:e2:8a:d3:98:c5:34:54:10: ad:4b:f6:ac:4e:44:5e:49:fd:b5:39:fc:e1:99:e3: ed:25:a8:f3:24:66:0a:bb:f4:0e:0f:b4:a8:50:4f: 2d:78:0e:ab:18:01:8d:95:82:03:45:fe:1b:a0:67: e7:64:8f:a1:1e:1a:ef:3d:3d:90:a1:0e:8a:9a:d7: 37:04:c5:35:ff:44:b7:68:26:91:e2:a8:7b:fb:e7: 48:37:2a:9c:9a:39:54:3c:66:73:70:37:7c:0f:ce: 0c:52:7d:12:b3:5f:56:9f:65:84:78:f0:22:3d:ac: 91:85:49:4d:48:d4:21:7e:51:4c:70:25:56:7f:89: 88:78:c6:3f:a4:34:c6:00:10:74:19:f9:99:a4:ff: 6e:3e:57:1a:ce:24:b6:f4:a2:73:6f:a3:fb:eb:46: 2b:94:4e:44:7a:35:a3:40:60:fe:b0:38:e3:c4:9d: 4d:b4:d7:52:62:8d:dd:0f:7f:dc:1f:69:50:52:58: f9:e9:28:75:62:5f:36:36:6f:f4:f7:36:79:14:71: 49:92:8c:f7:6d:4f:7c:7d:f2:98:94:2c:6a:c2:44: fa:ca:47:df:a6:5f:95:53:b1:c3:22:ba:99:bb:58: 4c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:39:1A:93:8F:FA:A4:70:63:71:D3:01:6B:B9:D5:22:66:C8:BE:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3d:cd:26:13:d7:62:7c:7b:2f:99:41:88:5c:ad:b1:a8:8e: 33:38:3a:02:f8:31:5d:f0:82:1f:44:1d:07:62:89:1c:06:a2: c9:8d:a6:c2:11:07:e1:9b:b3:55:47:88:0d:99:0a:9b:10:0f: ca:b7:c8:1b:d7:d2:9a:6e:f9:5c:09:4f:00:20:8f:0f:ee:7f: 9a:a3:68:d4:32:04:8f:41:41:0a:6c:e5:2c:28:f9:0a:b4:a2: b0:b1:a7:93:09:0d:99:78:f8:30:17:3f:02:15:06:54:d2:1b: 89:6d:1b:cd:cb:49:d9:23:de:25:8c:43:5b:0f:a8:36:73:c6: 1f:76:1f:f5:2f:f3:68:66:b2:6c:f8:13:ed:a5:66:e0:da:91: 71:5f:50:8c:03:fa:b2:c8:2e:f6:92:78:5f:37:8b:92:0f:67: a3:dd:d5:5f:4a:0c:df:c0:bf:52:9e:b2:75:e4:e6:d9:b4:3b: 5d:a9:5a:29:e2:59:06:41:4f:af:5b:30:35:e3:c1:1e:97:98: 6c:2d:7b:75:c3:35:ca:5d:78:c7:5a:53:db:37:2a:49:70:5e: 67:12:c1:ef:9d:b6:59:0f:ef:9f:04:78:4b:bd:9d:25:4f:90: f6:a5:52:4b:2b:2a:2f:e9:94:3b:90:25:96:ba:51:86:41:e2: 7d:2a:62:41 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha86ihMZ2ihAjHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MjU3MThmY2QtMTc0Yi00MWNlLWI4MDQtNzEzNmJmZDYwNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPaZ4Twbjm1OO9NB6+51QAlzAV2z4orTmMU0 VBCtS/asTkReSf21OfzhmePtJajzJGYKu/QOD7SoUE8teA6rGAGNlYIDRf4boGfn ZI+hHhrvPT2QoQ6Kmtc3BMU1/0S3aCaR4qh7++dINyqcmjlUPGZzcDd8D84MUn0S s19Wn2WEePAiPayRhUlNSNQhflFMcCVWf4mIeMY/pDTGABB0GfmZpP9uPlcaziS2 9KJzb6P760YrlE5EejWjQGD+sDjjxJ1NtNdSYo3dD3/cH2lQUlj56Sh1Yl82Nm/0 9zZ5FHFJkoz3bU98ffKYlCxqwkT6ykffpl+VU7HDIrqZu1hM8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF45GpOP+qRwY3HTAWu51SJmyL7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjE2NmQzM2UtMGJlOC0z ODdkLThhOTAtZWM5YTVkMjRhNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBMPc0mE9difHsvmUGIXK2xqI4zODoC+DFd8IIfRB0HYokcBqLJjabC EQfhm7NVR4gNmQqbEA/Kt8gb19KabvlcCU8AII8P7n+ao2jUMgSPQUEKbOUsKPkK tKKwsaeTCQ2ZePgwFz8CFQZU0huJbRvNy0nZI94ljENbD6g2c8Yfdh/1L/NoZrJs +BPtpWbg2pFxX1CMA/qyyC72knhfN4uSD2ej3dVfSgzfwL9SnrJ15ObZtDtdqVop 4lkGQU+vWzA148Eel5hsLXt1wzXKXXjHWlPbNypJcF5nEsHvnbZZD++fBHhLvZ0l T5D2pVJLKyov6ZQ7kCWWulGGQeJ9KmJB -----END CERTIFICATE-----Generated at Tue Apr 29 09:24:22 2025 by rpki-client